Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3927146d-20f2-3bee-b43c-b43e68d33c11.roa
File:                     3927146d-20f2-3bee-b43c-b43e68d33c11.roa (raw, json)
Hash identifier:          Af9je0HkcfjWShiyyKtNo10WEYgEARM900zrXUrQNP0=
Subject key identifier:   90:9D:F9:1E:E4:C7:32:E5:A2:95:8D:63:7F:70:80:FB:BD:31:42:CA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C663A3FC4D81F1212BAB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3927146d-20f2-3bee-b43c-b43e68d33c11.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        24.60.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:63:a3:fc:4d:81:f1:21:2b:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=b0eac6d4-30b9-4aaa-9d6c-e216ba919dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ff:9a:59:b6:55:dc:b8:95:93:76:17:33:59:
                    b2:5f:af:5a:04:0f:dd:90:d5:b4:25:3f:e0:81:a6:
                    e3:65:54:41:12:4e:87:a7:38:a1:f3:7e:70:2b:78:
                    76:23:43:72:4f:a9:7f:7f:b6:5f:64:4b:39:cf:94:
                    e5:20:4d:bd:5a:7c:9b:15:68:6e:09:bc:02:8f:22:
                    7a:f2:5b:aa:a1:27:aa:a2:22:9a:3e:af:65:47:d0:
                    26:b3:a7:32:3b:2d:96:71:b2:8c:5f:00:c7:70:95:
                    98:61:8b:71:94:02:78:f9:c3:90:f7:2d:24:98:28:
                    36:cd:33:e9:9e:05:3e:94:52:41:78:5e:fd:a3:60:
                    c4:45:3b:6f:b8:e8:b7:c0:a8:b8:c9:aa:55:00:53:
                    47:e2:b8:2a:9e:80:4d:0d:de:8f:59:88:4d:70:ee:
                    bd:72:71:85:79:df:e9:13:dc:e6:e8:96:5a:58:b9:
                    e5:56:f2:f3:a7:a2:0e:0e:3f:0a:91:c2:81:56:db:
                    e3:dd:7a:94:72:fb:5a:c4:00:18:c3:b8:ce:5b:b0:
                    10:42:df:b9:d0:3f:9b:0d:5e:ed:10:52:04:8c:bf:
                    de:af:bf:e1:ef:40:dd:2a:12:2b:19:69:56:ac:eb:
                    fa:f9:52:e4:db:6c:ff:b3:1c:96:b5:71:30:5e:74:
                    b6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9D:F9:1E:E4:C7:32:E5:A2:95:8D:63:7F:70:80:FB:BD:31:42:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3927146d-20f2-3bee-b43c-b43e68d33c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.60.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:9a:92:44:30:e4:c6:03:e3:18:dc:7d:72:38:6f:27:ce:cc:
         17:7f:e1:92:12:b3:39:a8:33:1c:21:9f:1f:a7:5f:12:77:85:
         fb:12:59:56:54:d7:3b:8f:0f:f8:ac:6e:d0:cd:7c:91:d4:f3:
         86:75:a6:fb:a8:de:bc:78:87:3d:42:b5:f1:62:84:f5:9a:24:
         73:e8:e9:1c:57:10:77:bd:62:01:10:88:fc:be:52:e9:95:63:
         ee:85:bc:bb:aa:21:56:c0:e9:a4:f0:df:17:cf:08:78:8f:6d:
         59:b1:75:a2:6a:37:fa:1d:6a:15:a0:78:4b:16:e5:89:de:b8:
         88:b2:29:3f:f6:b4:a3:a9:f1:d4:21:39:64:c8:2a:89:a6:c8:
         a3:bf:8d:a2:e5:fd:49:48:6f:3e:17:9a:1c:d0:35:26:9b:61:
         f8:52:2f:1d:0f:e2:45:8e:cd:9e:63:38:4e:88:b9:28:ad:b7:
         1b:70:85:a4:0f:97:6d:c3:54:85:e1:b2:c4:76:32:e4:b1:d6:
         97:1b:11:74:36:f1:21:00:5d:f9:f6:11:82:e2:b8:c9:f7:89:
         0c:e8:48:45:ff:3e:d2:a0:64:48:f7:9a:55:14:79:7a:17:3d:
         23:03:99:3d:09:aa:e6:22:46:84:64:f7:ac:2f:7d:fb:74:c7:
         ff:70:c8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:22:35 2024 by rpki-client on console-fra.rpki-client.org